Job description

Description Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments. We are seeking a Senior Consultant with 3+ years of hands-on experience configuring CrowdStrike Falcon Cloud Security and its Cloud-Native Application Protection Platform (CNAPP) modules across Kubernetes and Amazon Elastic Kubernetes Service (EKS) environments. In this role, you will partner closely with the client's Technology and Cloud Engineering teams to implement and mature a CNAPP solution end to end — from Cloud Security Posture Management (CSPM) policy design through runtime workload protection. This is a hands-on, technically hands-in-the-console role, not an advisory-only engagement. This is a contract position involving a large state government health agency. Candidates with previous public sector or government contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S. Job Responsibilities: • Configure CrowdStrike Falcon Cloud Security and its applicable CNAPP modules in the Falcon console • Configure Kubernetes and Amazon EKS security policies • Establish Cloud Security Posture Management (CSPM) policies and tune Cloud Detection and Response (CDR) detections • Configure Cloud Workload Protection (CWP) and runtime security policies across development, non-production, performance, and production environments • Execute security use-case testing to validate detection, containment, and admission-control functionality • Implement end-to-end container security spanning image scanning, admission control, and runtime protection • Configure Cloud Infrastructure Entitlement Management (CIEM) capabilities, including entitlement analysis • Communicate architecture, implementation decisions, and technical findings to leadership and client stakeholders Requirements Must-Have: • 3+ years of hands-on experience configuring CrowdStrike Falcon Cloud Security and CNAPP modules (or a comparable CNAPP platform such as Wiz or Palo Alto Prisma Cloud), with CrowdStrike experience strongly preferred • Experience configuring Kubernetes and Amazon EKS security policies • Experience establishing CSPM policies and tuning CDR detections • Experience configuring CWP and runtime security policies across development, non-production, performance, and production environments • Experience executing security use-case testing to validate detection, containment, and admission-control functionality • Experience implementing end-to-end container security (image scanning, admission control, runtime protection) • Experience configuring CIEM capabilities, including entitlement analysis • Legally authorized to work in the U.S.; able to perform all work within the continental U.S. • Able to work primarily remote with travel approximately once per month Preferred / Nice-to-Have: • Strong AWS and GovCloud platform experience: IAM, IAM Roles for Service Accounts (IRSA), secure networking, GuardDuty, AWS Inspector, AWS KMS • Awareness of NIST SP 800-53 Revision 5 and CMS ARC-AMPE guidance • CrowdStrike certifications • Prior public-sector or government-contracting experience Skill(s) Technical Skills: • CrowdStrike Falcon Cloud Security / CNAPP configuration • Kubernetes and Amazon EKS security policy configuration • CSPM policy development and CDR detection tuning • CWP and runtime security policy configuration • Container security (image scanning, admission control, runtime protection) • CIEM and entitlement analysis • AWS / GovCloud security services (IAM, IRSA, GuardDuty, Inspector, KMS) • Security use-case and detection-validation testing Soft Skills: • Cross-functional collaboration with Technology and Cloud Engineering teams • Clear technical communication to leadership and non-technical stakeholders • Independent, hands-on problem-solving in a live production environment • High attention to detail given the security-critical nature of the work Benefits • Medical — Multiple POS health plan options including an HSA-compatible plan • Dental — PPO coverage for preventive, basic, and major services • Vision — Annual exam, frames, lenses, and contact lens allowance • 401(k) — Employer match up to 5% of eligible compensation • Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings • Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each • PTO — 15–25 days annually based on tenure • Paid Federal Holidays — All 11 federal holidays observed

Requirements

Must-haves

Configure CrowdStrike Falcon Cloud Security and its applicable CNAPP modules in the Falcon console
Configure Kubernetes and Amazon EKS security policies
Establish Cloud Security Posture Management (CSPM) policies and tune Cloud Detection and Response (CDR) detections
Configure Cloud Workload Protection (CWP) and runtime security policies across development, non-production, performance, and production environments
Execute security use-case testing to validate detection, containment, and admission-control functionality
Implement end-to-end container security spanning image scanning, admission control, and runtime protection
Configure Cloud Infrastructure Entitlement Management (CIEM) capabilities, including entitlement analysis
Communicate architecture, implementation decisions, and technical findings to leadership and client stakeholders
Experience configuring Kubernetes and Amazon EKS security policies
Experience establishing CSPM policies and tuning CDR detections
Experience configuring CWP and runtime security policies across development, non-production, performance, and production environments
Experience executing security use-case testing to validate detection, containment, and admission-control functionality
Experience implementing end-to-end container security (image scanning, admission control, runtime protection)
Experience configuring CIEM capabilities, including entitlement analysis
Legally authorized to work in the U.S.; able to perform all work within the continental U.S.
Able to work primarily remote with travel approximately once per month
Strong AWS and GovCloud platform experience: IAM, IAM Roles for Service Accounts (IRSA), secure networking, GuardDuty, AWS Inspector, AWS KMS
Awareness of NIST SP 800-53 Revision 5 and CMS ARC-AMPE guidance
CrowdStrike certifications
Prior public-sector or government-contracting experience
CrowdStrike Falcon Cloud Security / CNAPP configuration
Kubernetes and Amazon EKS security policy configuration
CSPM policy development and CDR detection tuning

Nice-to-haves

3+ years of hands-on experience configuring CrowdStrike Falcon Cloud Security and CNAPP modules (or a comparable CNAPP platform such as Wiz or Palo Alto Prisma Cloud), with CrowdStrike experience strongly preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

kubernetesaws

Platform: comeet
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto